Live data from Hacker News

Remove “This incident will be reported.” from user warnings

github.com

111–120 of 302 posts

Re: Remove “This incident will be reported.” from user warnings

#111

Can someone share even one story where sudo reporting these "incidents" was helpful? This feature seems to come from a world where elite hackers simply repeat the same sudo command over and over hoping it will eventually work.

Yes. More or less the first time I used Linux was on a fedora workstation at my desk at MIT. The very nice sysadmin down the hall sent me an email just a bit later saying "We see you were trying to install x program. We installed it for you." I understand that this is a very rare experience but the first time I saw that message, a helpful person was actually looking at these reports.

Does this kind of sysadmin still exists? (or do they even still have the freedom to be so kind?)

I cannot really imagine that happening today, at least not in "professional" context.

Re: Remove “This incident will be reported.” from user warnings

#112
post #12

I was always disappointed it never summoned some grumpy graybeard unix admin from a dark server room basement to give me a chiding lecture.

I got a chiding lecture like that from some skinny UUG-type security admins, by manually shutting down my HP-UX workstation in a university CS lab. I had reached behind it and flipped the power switch. I tried to flip it back on just afterward, to resume my business (lol) but found that my login was blocked with a message...come up to security in room 300-something and talk to us to get your account un-suspended. The…

> the married student housing computer labs.

This is a good garden-path sentence.

Re: Remove “This incident will be reported.” from user warnings

#113
post #68

Earlier quoted context omitted.

That seems pretty stupid. While they're at it, why not update the SSH warning banner with a list of what we do and don't log on this system. As a courtesy to their adversary. This sudo message has been the same since the dawn of time. There is literally no reason to correct it. This is the one place you don't want to be pedantic, leaking security configuration via stderr.

something like 99% of computers with sudo installed are single-user machines where the only effect of the warning is to scare people and it's only been the same since people started to switch to sudo in the late 90s; su never printed such a warning

>the only effect of the warning is to scare people

Good. If you're not familiar with what sudo does, then you shouldn't be using it in the first place.

Re: Remove “This incident will be reported.” from user warnings

#115
post #87

Funny story. When I was in grad school, the math department office I was in had Linux computers administrated by the department. One day I was goofing in my shared office with a fellow grad student by playing with what resources were available. We were trying sudo and failed with enough silly passwords that we got the "this incident will be reported" message. I confidently told my officemate that these messages were…

To be fair in 2023, a lot of people are building LLMs and starting with downloading the internet.

Re: Remove “This incident will be reported.” from user warnings

#117
post #115
post #87

Funny story. When I was in grad school, the math department office I was in had Linux computers administrated by the department. One day I was goofing in my shared office with a fellow grad student by playing with what resources were available. We were trying sudo and failed with enough silly passwords that we got the "this incident will be reported" message. I confidently told my officemate that these messages were…

To be fair in 2023, a lot of people are building LLMs and starting with downloading the internet.

Save a lot of time and space by doing an rm -rf first

Re: Remove “This incident will be reported.” from user warnings

#118
post #113
post #68

Earlier quoted context omitted.

something like 99% of computers with sudo installed are single-user machines where the only effect of the warning is to scare people and it's only been the same since people started to switch to sudo in the late 90s; su never printed such a warning

>the only effect of the warning is to scare people Good. If you're not familiar with what sudo does, then you shouldn't be using it in the first place.

It's an abstraction. You shouldn't need to be familiar with every aspect of what it does.

Re: Remove “This incident will be reported.” from user warnings

#119
post #113
post #68

Earlier quoted context omitted.

something like 99% of computers with sudo installed are single-user machines where the only effect of the warning is to scare people and it's only been the same since people started to switch to sudo in the late 90s; su never printed such a warning

>the only effect of the warning is to scare people Good. If you're not familiar with what sudo does, then you shouldn't be using it in the first place.

If you shouldn't be using sudo, then you shouldn't be listed as a sudoer on that system. If you're listed as a sudoer, then you should become familiar with what sudo does.

Re: Remove “This incident will be reported.” from user warnings

#120

Earlier quoted context omitted.

Or you set up your system so mail for root gets redirected to an smtp server with an actual inbox read by actual people

I was surprised to start getting emails about my cron tasks once I set up my mail server. It's neat.

I've always felt it was a very bad practice not to do it.

In a lot of companies but one they avoided it for fear of receiving emails. On that only company that did it, we made sure that mailbox was clean by actually having a look when cron scripts were crapping out or when users failed sudo repeatedly and contacted the users. It was a much better housekeeping than log on a box and see there are hundreds of unread emails but dismissing it like most do.

Post reply on HN